
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/65cdfa75-652e-3198-9d41-4b83dc5660e1.roa
File: 65cdfa75-652e-3198-9d41-4b83dc5660e1.roa (raw, json)
Hash identifier: KyMqRe62vgkp7yL+Zp0VNezrD8WTKxy1HJGyiGKgTbU=
Subject key identifier: E3:1D:14:84:45:A7:29:D3:C0:B9:EA:22:E3:E8:4A:AC:4B:32:98:3E
Certificate issuer: /CN=44e39417-e931-4514-89dc-a42b5b458fb5
Certificate serial: 010D0C9F4328584E0436059D9B9389FA737E8980
Authority key identifier: 44:9D:B2:B5:1C:CA:4C:8C:77:44:9C:66:77:47:66:84:A2:C6:5F:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/65cdfa75-652e-3198-9d41-4b83dc5660e1.roa
Signing time: Sun 31 May 2026 13:00:10 +0000
ROA not before: Sun 31 May 2026 13:00:10 +0000
ROA not after: Sat 29 Aug 2026 13:00:10 +0000
asID: 8075
IP address blocks: 168.137.64.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/44e39417-e931-4514-89dc-a42b5b458fb5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/44e39417-e931-4514-89dc-a42b5b458fb5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 06 Jun 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:04:36:05:9d:9b:93:89:fa:73:7e:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e39417-e931-4514-89dc-a42b5b458fb5
Validity
Not Before: May 31 13:00:10 2026 GMT
Not After : Aug 29 13:00:10 2026 GMT
Subject: CN=ce070000-c032-45d5-bdac-ab735625e34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:59:73:1e:87:05:cf:25:96:d3:90:30:7a:f4:
e4:88:f4:e3:80:f7:ba:49:bc:bf:0c:87:d1:3c:db:
8a:81:f2:93:1c:e8:43:c6:58:26:a8:15:12:45:da:
19:65:66:31:97:e4:93:fc:f3:7e:26:c9:81:22:0d:
8f:ca:20:d6:ab:3e:28:c6:e3:b8:86:fc:09:1b:68:
40:fb:c5:cd:ff:9f:d2:50:1a:65:03:11:a9:e4:46:
a1:15:f5:a5:48:8e:e4:02:1c:cb:c3:0f:ec:64:fd:
fa:95:4b:70:42:88:36:7e:2a:c8:52:16:ab:c1:ad:
96:0b:af:c5:f1:39:78:db:02:22:fb:ac:b5:74:38:
eb:cb:76:7d:f6:23:c6:37:cc:c0:7b:cc:62:5a:90:
82:98:d9:ed:28:e9:13:18:2f:b7:59:5d:3f:46:3f:
19:a5:32:8a:31:85:0a:56:be:f5:77:d7:bb:91:c3:
38:0c:68:b0:0a:45:7c:9a:28:19:a6:63:63:d7:02:
6d:b5:8b:d7:5e:43:62:81:c4:14:6a:54:53:8d:0f:
d8:f1:f9:7f:12:e6:0a:37:ff:ff:cb:15:d3:46:dd:
27:a3:d4:d4:ae:df:6f:e0:d9:9e:74:a5:8c:69:02:
50:5c:14:64:6a:15:fe:b3:55:e9:fd:3c:68:fa:03:
47:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1D:14:84:45:A7:29:D3:C0:B9:EA:22:E3:E8:4A:AC:4B:32:98:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/65cdfa75-652e-3198-9d41-4b83dc5660e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/44e39417-e931-4514-89dc-a42b5b458fb5.crl
X509v3 Authority Key Identifier:
keyid:44:9D:B2:B5:1C:CA:4C:8C:77:44:9C:66:77:47:66:84:A2:C6:5F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5.cer
sbgp-ipAddrBlock: critical
IPv4:
168.137.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:98:ab:5d:0c:ac:15:59:1f:56:8d:1a:82:2d:50:4b:56:e5:
c8:5b:0f:e3:ab:52:c2:1c:fb:a3:93:5c:bf:79:af:89:be:b6:
1c:78:2e:ac:a8:cb:e4:ee:13:ff:7d:45:31:7c:85:28:97:b5:
65:b6:7c:50:7c:06:46:fb:de:e7:95:09:38:df:46:5b:f0:01:
47:8d:aa:45:96:b9:5e:db:4c:d2:c1:9b:99:f4:2c:1c:b3:4e:
09:68:ce:83:1f:35:47:fa:31:90:9a:35:50:d0:eb:35:b2:14:
fa:0f:57:e5:e3:cf:0b:57:06:cf:b6:2f:01:28:31:29:68:a6:
0a:d2:59:d4:83:ed:4a:da:af:a3:61:0c:b8:d4:51:9d:52:69:
78:d3:20:76:76:b2:31:24:75:3f:14:57:c2:f3:e8:2b:3b:be:
44:f2:61:7e:20:d9:c8:4b:8f:6e:43:82:37:c3:d2:87:f0:b8:
c7:06:40:a5:0b:43:b2:ff:56:e7:34:2d:9d:61:8a:f3:96:21:
3b:3f:53:59:1f:56:80:47:ff:3f:9c:6d:48:b4:4b:fe:3a:80:
47:f8:2d:35:70:56:37:0a:25:5d:d4:fd:16:48:68:b5:fa:c2:
c2:44:16:2c:f6:13:bb:ef:a0:11:cc:6a:b6:41:d7:9d:2d:78:
49:fe:27:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 20:01:51 2026 by rpki-client